CVE-2026-87771: Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and read

Q: Who can exploit this issue?

Unauthenticated attackers can exploit the affected AJAX actions. They do not need to log in to the WordPress site.

Q: Which inputs are involved in the vulnerable requests?

The issue involves the p_id and read parameters used in SQL queries by unauthenticated AJAX actions.

Q: What could an attacker obtain through exploitation?

Successful SQL injection can allow an attacker to extract sensitive data from the WordPress database.

Published Sep 18, 2026

Updated

The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database.

Affected Software

1 affected component

WordPress plugin<=1.1.0

Event History

Sep 18, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

Unauthenticated attackers can exploit the affected AJAX actions. They do not need to log in to the WordPress site.

Which inputs are involved in the vulnerable requests?

The issue involves the p_id and read parameters used in SQL queries by unauthenticated AJAX actions.

What could an attacker obtain through exploitation?

Successful SQL injection can allow an attacker to extract sensitive data from the WordPress database.